diff --git a/pam.spec b/pam.spec
index d01e32b..150790a 100644
--- a/pam.spec
+++ b/pam.spec
@@ -4,7 +4,7 @@
 %define _pamconfdir %{_sysconfdir}/pam.d
 Name: pam
 Version: 1.5.2
-Release: 7
+Release: 8
 Summary: Pluggable Authentication Modules for Linux
 License: BSD and GPLv2+
 URL: http://www.linux-pam.org/
@@ -92,7 +92,6 @@ install -m 644 %{SOURCE10} $RPM_BUILD_ROOT%{_pamconfdir}/config-util
 install -m 644 %{SOURCE16} $RPM_BUILD_ROOT%{_pamconfdir}/postlogin
 install -m 600 /dev/null $RPM_BUILD_ROOT%{_secconfdir}/opasswd
 install -d -m 755 $RPM_BUILD_ROOT/var/log
-install -m 600 /dev/null $RPM_BUILD_ROOT/var/log/tallylog
 install -d -m 755 $RPM_BUILD_ROOT/var/run/faillock
 
 for phase in auth acct passwd session ; do
@@ -111,9 +110,6 @@ make check
 
 %post
 /sbin/ldconfig
-if [ ! -e /var/log/tallylog ] ; then
-	/usr/bin/install -m 600 /dev/null /var/log/tallylog || :
-fi
 
 %postun -p /sbin/ldconfig
 
@@ -157,7 +153,6 @@ fi
 %config(noreplace) %{_secconfdir}/sepermit.conf
 %config(noreplace) %{_secconfdir}/faillock.conf
 %dir /var/run/sepermit
-%ghost %verify(not md5 size mtime) /var/log/tallylog
 %dir /var/run/faillock
 %{_prefix}/lib/tmpfiles.d/pam.conf
 
@@ -179,6 +174,9 @@ fi
 
 
 %changelog
+* Thu May 9 2024 dongyuzhen <dongyuzhen@h-partners.com> - 1.5.2-8
+- remove redundant /var/log/tallylog file
+
 * Wed Jan 24 2024 zhangruifang <zhangruifang1@h-partners.com> - 1.5.2-7
 - fix CVE-2024-22365